Hidden Honey Homes Hostaway App Privacy Policy.

Last updated: 16 October 2026

This Privacy Policy explains how Hidden Honey Homes, Part of Hidden Honey LLC
, operating as Hidden Honey Homes (“we,” “us,” or “our”), handles information through the Hidden Honey Homes Hostaway Shopify application (“App”).

This policy covers merchants who install or use the App, their authorized users, and information processed through the App’s storefront features. Purchases made through our retail store are covered separately by the store’s privacy policy.

1. Information we process

We process information needed to operate the App, including:

  • Store and authentication information: Shopify store domain, authorized permissions, session identifiers, authorization tokens, and expiration information. Shopify may also provide an authorized user’s name, email address, user identifier, language, and account-owner status.
  • Property information: Hostaway listing identifiers, property names, descriptions, locations, images, bedrooms, bathrooms, guest capacity, and booking links.
  • Configuration information: connected booking websites, selected properties, generated-page identifiers, widget settings, page styles, synchronization status, and setup or verification records.
  • Catalog information, where catalog tools are used: product details, prices, images, import records, and connections to Shopify products.
  • Support information: contact details, store domain, messages, attachments, and information you provide when requesting assistance.
  • Technical information: hosting and infrastructure providers may process IP addresses, request timestamps, browser or device information, and diagnostic or security logs when delivering the service.

The current App does not request Shopify customer or order API permissions or query Shopify customer profiles or order histories. Merchant authentication information may nevertheless contain personal information.

Shopify privacy notifications may contain customer identifiers. The App verifies these notifications and does not intentionally retain their customer details as a separate customer dataset.

2. How we use information

We use information to:

  • Authenticate merchants and authorized users.
  • Connect stores to approved Hostaway booking websites.
  • Retrieve and synchronize selected property information.
  • Create and configure storefront pages and booking widgets.
  • Apply page styles and check storefront setup.
  • Maintain store-specific configuration and operational records.
  • Answer support requests, diagnose errors, and protect the service.
  • Respond to privacy requests and meet applicable legal obligations.

Property information published through the App may become publicly visible on the merchant’s storefront.

3. Hostaway widgets and reservations

The App loads Hostaway search or calendar widgets and provides links to connected booking websites.

Loading or using these features may transmit information directly to Hostaway and its service providers, including network and browser information, selected dates, guest counts, and listing identifiers. A booking website may collect additional information when a visitor makes a reservation.

Reservations and payments are handled through the connected booking service. The App’s backend does not provide its own reservation-payment form or store payment-card details.

Hostaway and the accommodation provider have their own privacy practices. Visitors should review the notices available on the booking website. Merchants are responsible for providing appropriate storefront notices and obtaining any consent required for third-party widgets.

4. Service providers and disclosures

The App uses the following services where necessary to provide its features:

  • Shopify: installation, authentication, store APIs, storefront features, and privacy notifications.
  • Hostaway: property information, booking widgets, and connected reservation services.
  • Vercel: application hosting and request handling.
  • Neon: hosting the App’s PostgreSQL database.

Support communications are also processed through the email or support services used to receive and answer your messages.

We may disclose information when required by law, to investigate abuse, to protect the service or the rights of others, or to establish or defend legal claims.

5. Cookies and similar technologies

The App uses Shopify’s authentication mechanisms to identify authorized users.

Shopify, Hostaway, and their service providers may use cookies, local storage, or similar technologies within their own services. Their use is subject to the relevant provider’s notices and applicable consent controls.

The App’s current code does not implement a separate advertising pixel or custom advertising-tracking system. This statement does not describe all tracking that a merchant or third-party booking website may independently use.

You can manage cookies through your browser and the consent controls offered by the relevant website. Blocking some technologies may affect functionality.

6. Retention and deletion

We retain operational App records while needed to provide the service.

When the App receives a verified Shopify uninstall notification or shop-redaction request, its cleanup process deletes the relevant store’s records from the operational database. These include sessions, Hostaway connections, cached properties, import records, collection mappings, and legacy subscription records where present.

Uninstalling the App does not necessarily remove pages, content, or settings already saved in the merchant’s Shopify store. Merchants can use Removal & Cleanup before uninstalling and manage remaining content through Shopify.

Deleting App records does not delete source information held independently by Shopify, Hostaway, or the accommodation provider.

Different records have different retention arrangements:

  • Runtime logs: Vercel retains runtime logs according to the hosting plan. The current Hobby plan provides a one-hour runtime-log retention window.
  • Other infrastructure records: build, security, database, and diagnostic records may follow separate provider retention schedules.
  • Database history and backups: where retained, these follow the database provider’s configured recovery and backup lifecycle. Deletion from the active database may not immediately remove historical copies.
  • Support correspondence: we retain correspondence while needed to resolve the request, handle related follow-up, and meet applicable legal or dispute-resolution requirements.

Retention may be extended where a specific legal obligation requires it. Contact us for information about records associated with your store.

7. Privacy requests

You may contact us to request access to, correction of, or deletion of personal information we hold about you.

Depending on applicable law, you may also have rights to restrict or object to processing, receive a portable copy, withdraw consent where processing relies on consent, or complain to a supervisory authority.

Email hello@hiddenhoneyhomes.com with your request and the relevant Shopify store domain. Do not include passwords, access tokens, or payment-card details.

We may need to verify your identity or authority before acting. We will respond within applicable legal time limits and explain any lawful limitations on fulfilling your request.

Guests with questions about reservation information should contact the accommodation provider or booking service. We will assist with requests concerning information under our control.

8. International processing

Our service providers may process information in countries other than your country of residence. Processing locations depend on the hosting, database, and third-party services used.

Where applicable law requires safeguards for international transfers, those transfers must be supported by the relevant legal arrangements. Contact us for information about processing locations and applicable safeguards.

9. Security

The App uses HTTPS for information transmitted to its hosted endpoints, Shopify authentication for protected merchant functions, and signature verification for Shopify webhooks.

Hostaway service credentials are handled on the server rather than displayed in the merchant interface.

No internet transmission or storage system can be guaranteed completely secure.

10. Changes to this policy

We may update this policy when the App or our information-handling practices change. We will update the date above and provide additional notice where required by applicable law.

11. Contact

For privacy questions or requests, contact:

Hidden Honey Homes, Part of Hidden Honey LLC
Trading as Hidden Honey Homes
2400S Flagler Ave
Flagler Beach, FL, 32136-4026
Email: hello@hiddenhoneyhomes.com